EUVD-2004-0004

Malware in sbrugna...

EUVD-2004-0785

Malware in sbrugna...

CVE-2004-0787

Cross-site scripting XSS vulnerability in the web frontend in OpenCA 0.9.1-8 and earlier, and 0.9.2 RC6 and earlier, allows remote attackers to inject arbitrary web script or HTML via the form input fields...

CVE-2004-0787

Cross-site scripting XSS vulnerability in the web frontend in OpenCA 0.9.1-8 and earlier, and 0.9.2 RC6 and earlier, allows remote attackers to inject arbitrary web script or HTML via the form input fields...

OpenCA Multiple Signature Validation Bypass

The remote host seems to be running an older version of OpenCA. It is reported that OpenCA versions up to and incluing 0.9.1.3 contains multiple flaws that may allow revoked or expired certificates to be accepted as valid. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

OpenCA Client System Browser Form Input Field XSS

The remote host seems to be running an older version of OpenCA. It is reported that OpenCA versions up to and including 0.9.2-RC2 are affected by an HTML injection vulnerability when processing user input to the web form frontend. This issue may permit an attacker to execute hostile HTML code in...

CVE-2004-0004

The libCheckSignature function in crypto-utils.lib for OpenCA 0.9.1.6 and earlier only compares the serial of the signer's certificate and the one in the database, which can cause OpenCA to incorrectly accept a signature if the certificate's chain is trusted by OpenCA's chain directory, allowing...

CVE-2004-0004

The libCheckSignature function in crypto-utils.lib for OpenCA 0.9.1.6 and earlier only compares the serial of the signer's certificate and the one in the database, which can cause OpenCA to incorrectly accept a signature if the certificate's chain is trusted by OpenCA's chain directory, allowing...

[OpenCA Advisory] Vulnerability in signature verification

OpenCA Security Advisory 16 January 2004 Vulnerability in signature validation ===================================== A flaw in OpenCA before version 0.9.1.7 could cause OpenCA to accept a signature from a certificate if the certificate's chain is trusted by the chain directory of OpenCA. This mea...